keys:
  - &user_albert           D98BBC6C9A27324654C2D8C464F6C4EB46C4543A
  - &host_nixos-vm-01      e743e87411bc58cb492d92a5374315aea8a446f1
  - &host_nixos-rpi4-01    b8313b59194b577cb5a0187bbfd686dae3a80e78
  - &host_nixos-rpi4-02    166ed206738ba44b3428629dc1f2ed98cbef1a6a
  - &host_nixos-rpi4-03    769021d2a24bf6e4d1c72791fc302f9a3cfb5171
  - &host_nixos-framework  11727dab3f62daaf7f92fc1143e3f07ef88bd5a4
  - &host_framework-server dfd3a496aba156fa521e82ada77d68dc727cf52b
  - &host_osaka-linode-01  5f548d87ab2b8a4d48d80da3f2ff8352998da7fa

creation_rules:
  - path_regex: secrets\/secrets\.yaml$
    key_groups:
    - pgp:
      - *user_albert
      - *host_nixos-rpi4-01
      - *host_nixos-rpi4-02
      - *host_nixos-rpi4-03
      - *host_nixos-vm-01
      - *host_osaka-linode-01
      - *host_nixos-framework
      - *host_framework-server

  - path_regex: secrets\/tailscale\.yaml$
    key_groups:
    - pgp:
      - *user_albert
      - *host_nixos-rpi4-01
      - *host_nixos-rpi4-02
      - *host_nixos-rpi4-03
      - *host_nixos-vm-01
      - *host_osaka-linode-01
      - *host_nixos-framework
      - *host_framework-server

  - path_regex: secrets\/wireguard\.yaml$
    key_groups:
    - pgp: 
      - *user_albert
      - *host_nixos-rpi4-03
      - *host_osaka-linode-01
      - *host_framework-server

  - path_regex: secrets\/backups-rpi4\.yaml$
    key_groups:
    - pgp: 
      - *user_albert